Welcome to GeekPolice!

Our Appeal to YOU: Please join and help us grow this website. We truly love technology and security and we want to share it with the world. Recognize the excitement of technology here daily:☞Security Discussion on malware, ransomware, and much more!
☞24/7 hard- and software tech support (+mobile!)
☞Virus and malware removal support
☞Tons of tutorials, guides and solutions
☞The very finest of our voluntary Support Staff
☞Much, much more absolutely FREE of any charge!

Note to non-members: Guests are able to open topics and reply to posts; however, guests are not allowed to create their own profile, unless they register (which you can do so below). By registering, you unlock many more capabilities of this site, and are able to interact with other members including making friends! Who wouldn't love a friendly tech community? Join us now!

Google searches are getting re-directed. I've had this problem for awhile. Updated to last virus software and apps. Completed the suggested multiple scans by the virus software support folks. Can't get rid of it.

Wondering if someone can verify if this is TDISERV and provide me some help?

I've completed all the instructions to make sure the specified tools are updated before posting. Here's the OTL.TXT data below followed by the contents from the Extras file.

Return to OTL, right click in the "Custom Scans/Fixes" window (under the light green bar) and choose Paste.

Click the red Run Fix button.

A fix log in Notepad will appear. Copy the contents of the fix log to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.

Close OTL.exe

If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

Thanks - here's the results from running the OTL script you recommended:

========== OTL ==========Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\eaxbhcv deleted successfully.C:\Users\Marianne\AppData\Roaming\setxa.dll moved successfully.File move failed. C:\Windows\System32\wrLZMA.dll scheduled to be moved on reboot.File move failed. C:\Windows\System32\SsiEfr.exe scheduled to be moved on reboot.

OTL by OldTimer - Version 3.2.22.3 log created on 04172011_104434

Files\Folders moved on Reboot...File move failed. C:\Windows\System32\wrLZMA.dll scheduled to be moved on reboot.File move failed. C:\Windows\System32\SsiEfr.exe scheduled to be moved on reboot.

Thanks for offering the continued support. Combofix log below. This computer is running webroot as called out in the log. In this version I can only turn of autoscan I can't stop the app. Let me know if I need to start up the computer without Webroot running at all or figure out how to kill the process and re-run combofix??